Heap-Based Buffer Overflow Vulnerability in ComponentOne ActiveX Controls

CVE-2008-4827

What is CVE-2008-4827?

Multiple heap-based buffer overflow vulnerabilities exist within the AddTab method in the Tab and CTab ActiveX controls in c1sizer.ocx, as well as the TabOne ActiveX control in sizerone.ocx. These flaws enable attackers to exploit the controls by adding an excessive number of tabs or using long tab captions, leading to potential execution of arbitrary code remotely. This issue affects users of various products utilizing affected ActiveX controls, raising serious security concerns when not mitigated.

References